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Plaintiff, 



V. 



MICROSOFT CORPORATION, 



2-0 5CV-546 



Defendant. 



COMPLAINT FOR PATENT INFRINGF TvlENT: 
INJUNCTIVE RELIEF; DAMAGES: AND 
DEMAND FOR JURY TRIAL 



Plaintiff Visto Corporation ("Visto") alleges as follows for its Complaint against 
Defendant Microsoft Corporation ("Microsoft"): 

PARTIES 

1 . Visto is a corporation organized and existing under the laws of the State of 
Delaware with a place of business at 275 Shoreline Drive, Suite 300, Redwood Shores, 
California 94065. 



State of Washington with its principal place of business at One Microsoft Way, Redmond, 
Washington 98052, which is doing business and infiinging Visto' s patents in the Eastern District 
of Texas and elsewhere in the United States. 



Microsoft is a corporation organized and existing under the laws of the 



JURISDICTION AND VENUE 



This is a civil action for patent infiingement arising xmder the patent laws 



of the United States, 35 U.S.C. § 271, et seq. 
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(57) ABSTRACT 

A system includes a general synchronization module at the 
client site for operating within a first firewall and for 
examining first version information to determine whether a 
first workspace element has been modified. The system 
further includes a synchronization agent at a global server 
for operating outside the first firewall and for forwarding to 
the general synchronization module second version infor- 
mation which indicates whether an independently- 
modifiable copy of the first workspace element has been 
modified. A synchronization-start module is maintained at 
the client site for operating within the first firewall and for 
securely initiating the general synchronization module and 
the synchronization agent when predetermined criteria have 
been satisfied. The system further includes means for gen- 
erating a preferred version from the first workspace element 
and from the copy by comparing the first version informa- 
tion and the second version information, and means for 
storing the preferred version at the first store and at the 
second store. 
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The communications module 405 includes routines for cbronizalion module 430 to execute its routines which are 

compressing data, and routines for communicating via the described below. 

communications interface 325 (FIG. 3) with the synchroni- j, wi]i be appreciated that the synchronization agent 126 

zation agent 126 (FIG. 1). The communications module 405 preferably examines the version information 124 and for- 

may further include routines for applymg Secure Socket 5 ^^^^ ^^^^-^^ information 124 determined to be 

Uyer (SSL) technology and user identification and authen- ^^^j^^j ^.^^ synchronization signature 435. TTiis 

tication techniques (i.e., digital certificates) to establish a,,. r j j 

secure communication channel through the corporate fire- technique makes efficient use ofprocessor power and avoids 

waU 130 and through the global firewTu 126. Examples of T^^^^fS unnecessary data across the communications 

communications modules 405 may include TCP/IP stacks or ^^S. The general synchninizaiion module 425 m the 

the AppleTalk® protocol. '° =°fP°''"* .^AN 135 accordmgly compares the received 

„ . r ^ift - , J c ■ . version mformalion 124 With the version information 255 to 

The user interface 410 includes routines for communicat- , . • i- - j j it i *• c 

. . , • 1 J 1 u- 1 determine if reconciliation is needed. Upon completion of 

ing with a user, and may include a conventional Graphical j , u • .i_ i u ■ f • j 

uir Interface VgUD The user interface 410 operates in "^^^^ synchronization, the general synchronizaUon mod- 

J* -^u *u *u J 1^ . i^ft ule 425 updates the last synchronization signature 435. 

coordination with the other desktop computer 160 compo- ^ ^ . 

nents as described herein. content-based synchronization module 430 includes 

Hie locator module 415 includes routines for identifying for reconciling two or more modified versions in 

the memory locations of the workspace elements in the workspace data 123, 185 of the same workspace element, 

workspace data 185 and the memory locations of the work- For example, if the original and the copy of a user workspace 

space elements in the workspace data 123. Workspace 20 f»ement have both been modified independently since the 

element memory location identification may be imple- last synchronization, the contentbased synchronization mod 

memed using intelligent software, i.e., preset memory- 430 rlelermme. ihe aFpropriatc respo^^^^^^ action. The 

addresses or the system's registry, or using dialogue boxes content-based synchronization module 430 may request a 

to query a user. Accordingly, the locator module 415 deter- ^^^^^j ^^^^^ 

mines the memory addresses of the workspace elements in 25 '^^^"""^ ^^"^f on. preset preferences, i.e. by storing 

the e-mail data 165, the workspace elements in the file data ^""'^ ^° by mtegratmg the changes 

170, the workspace elements in the calendar data 175 and ^"^^ ^ preferred version which replaces each modified 

the workspace elements in the user data 180 as weU as the version at both stores. 

memory addresses of the corresponding workspace elements FIG. 5 is a block diagram illustrating details of the 
in the workspace data 123. It will be appreciated that the 30 synchronization agent 126, which includes a communica- 
locator module 415 may perform workspace element ^ions module 505 (similar to the communications module 
memory location identification upon system boot-up or after 405 described above with reference to FIG. 4) and a general 
each communication with the global server 120 to maintain synchronization module 510 (similar to the general synchro- 
updated memory locations of workspace elements. nization module 425 described above also with reference to 
The synchronization-start module 420 includes routines 35 communications module 505 includes routines 
for determining when to initiate synchronization of work- compressmg data, and routines for communicating via 
space data 123 and workspace data 185. For example, the ^^e communications channel 125 with the base system 190. 
synchronization-start module 420 may initiate data synchro- communications module 505 may further include rou- 
nization upon user request, at a particular time of day, after ^^^^^ establishing a secure communications channel 
a predetermined time period passes, after a predetermined 40 through the global firewall 126 and through the corporate 
number of changes, after a user action such as user log-off firewall 130. 

or upon like criteria. The synchronization-start module 420 The general synchronization module 510 includes rou- 
initiates data synchronization by instructing the general tines for comparing the version information 124 with the last 
synchronization module 425 to begin execution of its rou- synchronization signature 435, and routines for forwarding 
tines. It will be appreciated that communications with syn- 45 to the general synchronization module 425 version informa- 
chronization agent 126 preferably initiate from within the lion 124 determined to be modified. The general synchro- 
corporate LAN 1135, because the typical corporate firewall nization module 510 may either maintain its own last 
130 prevents in-bound communications and allows out- synchronization signature 435 copy (not shown), 
bound communications. Alternatively, the request to synchronize from the base 
The general synchronization module 425 includes rou- 50 system 190 may include a copy of the last synchronization 
tines for requesting version information 124 from the syn- signature 435, The general synchronization module 510 
chronization agent 126 (FIG, 1) and routines for comparing fiirther includes routines for receiving preferred versions of 
the vereion information 255 against a last synchronization workspace data 185 workspace elements from the general 
signauire 435 such as a last synchronization date and time to synchronization module 425, and routines for forwarding 
determine which versions have been modified. The general 55 preferred versions of workspace data 123 workspace ele- 
synchronization module 425 further includes routines for ments to the general synchronization module 425. 
comparing the version information 124 and the version FIG. 6 is a flowchart illustrating a method 600 for 
information 255 to determine if only one or both versions of synchronizing multiple copies of workspace data 123, 185 in 
a particular workspace element have been modified and a secure network 100. Method 600 begins with locator 
routines for performing an appropriate synchronizing 60 module 415 in step 605 identifying the memory locations of 
responsive action. Appropriate synchronizing responsive the workspace elements in workspace data 123, 185. As 
actions may include forwarding the modified version (as the stated above, workspace element memory location identifi- 
preferred version) of a workspace element in workspace data cation may be implemented using intelligent software or 
1 85 or forwarding just a compilation of the changes to the dialogue boxes. The user interface module 410 in step 610 
other store(s). Other appropriate synchronizing responsive 65 enables selection of the workspace elements in workspace 
actions may include, if reconciliation between two modified data 123, 185 to be synchronized by the general synchro- 
versions is needed, then instructing the content-based syn- nization module 425. 
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The synchronization-start nx>dule 420 in step 615 deter- 
mines whether predetermined criteria have been met which 
indicate that synchronization of the workspace elements 
selected in step 610 should start. If not, then method 600 
loops back to step 615. Otherwise, the communications 5 
module 405 and communications module 505 in step 617 
establish a secure communications channel between the 
global server 120 and the desktop computer 160. The 
general synchronization module 510 in step 620 compares 
the version information 124 of each of the selected work- lO 
space elements in workspace data 123 against the last 
synchronization signature 435 to determine modified work- 
space elements, and forwards the version information 124 of 
workspace elements determined to be modified to the gen- 
eral synchronization module 425. Further, the general syn- 15 
chronization module 425 in step 620 compares the version 
information 255 of each selected workspace element in the 
workspace data 185 against the last synchronization signa- 
ture 435 to locate modified workspace elements. In this 
embodiment, a workspace element has been modified if the 20 
date and time of last modification is after the date and time 
01 last synchronization. 

If no modified workspace elements in workspace data 123 
or in workspace data 185 are located, then the general 
synchronization modules 425 and 510 in step 650 update the 25 
last synchronization signature 435 and method 600 ends. 
Otherwise, the general synchronization module 425 in step 
625 determines whether more than one version of the same 
workspace element has been modified since the last syn- 
chronization. ^0 

If only one version has been modified, then the corre- 
sponding general synchronization module 425 or 510 in step 
630 forwards the updated preferred version of the workspace 
element to the other store, and then in step 635 determines 
whether all workspace elements selected in step 610 have 
been examined. If so, then method 600 jumps to step 650. 
Otherwise, then method 600 returns to step 620, 

If more than one version has been modified, then the 
general synchronization module 425 in step 640 instructs the ^ 
content-based synchronization module 430 to reconcile the 
modified versions. Reconciliation may include requesting 
instructions from the user or, based on preselected 
preferences, performing responsive actions such as storing 
both versions at both stores. 

45 

General synchronization module 425, 510 in step 645 
sends the preferred version of the workspace element or just 
a compilation of the changes to the other store. That is, if the 
preferred version is a workspace element in the workspace 
data 185, then general synchronization module 425 sends 50 
the preferred version or the changes to general synchroni- 
zation module 510 to update the outdated workspace ele- 
ment in the workspace data 123. If the preferred version is 
a workspace element in the workspace data 123, then the 
general synchronization module 510 sends the preferred 55 
version or the changes to the general synchronization mod- 
ule 425 to update the outdated workspace element in the 
workspace data 185. Method 600 then jumps to step 635. 

The foregoing description of the preferred embodimc.313 
of the invention is by way of example only, and other 60 
variations of the above -described embodiments and methods 
are provided by the present invention. For example, 
although the global server 120 is illustrated as a single 
device, the global server 120 may include several computers 
networked together. Although not described in great detail, 65 
the remote terminal 105 can synchronize copies of work- 
space elements stored on it with workspace elements of 



35 



workspace data 123 stored on the global server 120. Com- 
ponents of this invention may be implemented using a 
programmed general purpose digital computer, using appli- 
cation specific integrated circuits, or using a network of 
interconnected conventional components and circuits. The 
embodiments described herein have been presented for 
purposes of illustration and are not intended to be exhaustive 
or limiting. Many variations and modifications are possible 
in light of the foregoing teaching. The system is limited only 
by the following claims. 
What is claimed is: 

1. A computer-based method comprising the steps of: 

(a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store outoid: ^ircv.'aii; 

(c) initiating steps (a) and (b) from within the firewall 
when predetermined criteria have been satisfied; 

(d) generating a preferred version from the first woric- 
space element and from the copy based on the first and 
second examination results; and 

(e) storing the preferred version at the first store and at the 
second store. 

2. The method of claim 1 wherein the second store is on 
a global server outside the firewall and which is protected by 
a global firewall. 

3. The method of claim 1 wherein the first version 
information includes the date and time the first workspace 
element was last modified and the second version informa- 
tion includes the date and time the copy was last modified. 

4. The method of claim 3 wherein generating the first 
examination results includes the step of comparing the first 
version information against a date and time of last synchro- 
nization. 

5. The method of claim 3 wherein generating the second 
examination results includes the step of comparing the 
second version information against a date and time of last 
synchronization. 

6. The method of claim 1 further comprising, before 
generating the first examination results, the step of updating 
the first version information whenever the first workspace 
element is modified. 

7. The method of claim 1 further comprising, before 
generating the second examination results, the step of updat- 
ing the second version information whenever the copy is 
modified. 

8. The method of claim 1 wherein if only one of the first 
workspace element and the copy has been modified, then the 
step of generating includes selecting the one as the preferred 
version. 

9. llie method of claim 1 further comprising the step of 
locating the first workspace element, the first version 
information, the copy and the second version information. 

10. A system comprising: 

a general synchronization module for operating within a 
first firewall and for examining first version informa- 
tion to determine whether a first workspace element has 
been modified; 

a synchronization agent for operating outside the first 
firewall and for forwarding to the general synchroni- 
zation module second version information which indi- 
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cales whether an independenlly modifiable copy of the 
first workspace element has been modified; 

a synchronization -St art module for operating within the 
first firewall and for initiating the general synchroni- 
zation module and the synchronization agent when 5 
predetermined criteria have been satisfied; 

means for generating a preferred version from the first 
workspace element and from the copy by comparing 
the first version information and the second version 
information; and lO 

means for storing the preferred version at the first store 
and at the second store. 

11. The system of claim 10 further comprising a commu- 
nications module for communicating through the first fire- 
wall. 15 

12. The system of claim 10 wherein the synchronization 
agent and the second store are on a global server which is 
protected by a global firewall. 

13. The system of claim 12 further comprising a commu- 
nications module for communicating through the first fire- 20 
wall and through the global firewall. 

14. T^e system of claim 10 wherein the first version 
information includes the date and time the first workspace 
element was last modified and the second version informa- 
tion includes the date and time the copy was last modified. 

15. The system of claim 14 wherein the general synchro- 
nization module compares the first version information 
against a date and lime of last synchronization. 

16. The system of claim 14 wherein the synchronization 
agent compares the second version information against the 
date and time of last synchronization. 

17. The system of claim 10 further comprising means for 
updating the first version information whenever the first 
workspace element is modified. 

18. The system of claim 10 further comprising means for 
updating the second version information whenever the copy 35 
is modified. 

19. The system of claim 10 wherein if only one of the first 
workspace element and the copy has been modified, then the 
means for generating selects the one as the preferred version. 

20. The system of claim 10 further comprising a locator 
module for locating the first store, the first workspace 
element, the first version information, the second store, the 
copy and the second version information. 

21. A system comprising: 

first means for generating first examination results from 
first version information which indicates whether a first 
workspace element stored at a first store within a 
firewall has been modified; 

second means for generating second examination results 
from second version information which indicates 
whether an independently-modifiable copy of the first 
workspace element has been modified, the copy being 
stored at a second store outside the firewall; 

means for initiating the first and second means from 
within the firewall when predetermined criteria have 
been satisfied; 

means for generating a preferred version from the first 
workspace element and from the copy based on the first 
and second examination results; and 

means for storing the preferred version at the first store 
and at the second store. 

22. A computer-readable storage medium storing program 
code for causing a computer to perform the steps of: 

(a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 



(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store outside the firewall; 

(c) initiating steps (a) and (b) from within the firewall 
when predetermined criteria have been satisfied; 

(d) generating a preferred version from the first work- 
space element and from the copy based on the first and 
second examination results; and 

(e) storing the preferred version at the first store and at the 
second store. 

23. A computer-based method comprising the steps of: 

(a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has i^en modified, the copy '•^'"ing stored at a 
second store outside the firewall; 

(c) initiating steps (a) and (b) from within the firewall 
when predetermined criteria have been satisfied; 

(d) determining based on the first and second examination 
results that both the first workspace element and the 
copy have been modified; and 

(e) storing both the first workspace element and the copy 
at the first store and at the second store. 

24. A system comprising: 

first means for generating first examination results from 
first version information which indicates whether a first 
workspace element stored at a first store within a 
firewall has been modified; 

second means for generating second examination results 
from second version information which indicates 
whether an independently-modifiable copy of the first 
workspace element has been modified, the copy being 
stored at a second store outside the firewall; 

means for initiating the first and second means from 
within the firewall when predetermined criteria have 
been satisfied; 

means for determining based on the first and second 
examination results that both the first workspace ele- 
ment and the copy have been modified; and 

means for storing both the first file and the copy at the first 
store and at the second store. 

25. A system comprising: 

a global server for operating outside a firewall and includ- 
ing memory for. storing first workspace data and cor- 
responding first version information; and 

a synchronization agent for managing the first workspace 
data and the corresponding first version information 
and for communicating with remote clients; and 

a remote client for operating within the firewall and 
including memory for storing second workspace data 
and corresponding second version information; 

means for cooperating with the synchronization agent to 
synchronize the first workspace data with the second 
workspace data by examining the first version infor- 
mation and the second version information; and 

a synchronization-start module for initiating workspace 
data synchronization between the global server and the 
remote client. 
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EX PARTE cooperate LAN [1135] 135, because the typical cooperate 

t-it:^t^-v^ a a«txi ati/^xi ^r:<-wvrTr7ir^ A^r-w? firewall 130 prevents in-bouad communications and allows 

REEXAMINATION CERTIFICATE ^^..^^^^ communications. 

ISSUED UNDER 35 U.S.C. 307 column 6, Unes 15-27: 

mjc uA-rrKiT ic ururuv Ax^rMMri^ AC ' contcnt-bascd Synchronization module 430 includes 

mt PAl LN 1 IS HbRtBY AMENDED AS ^^^^.j^gg reconciling two or more modified versions in 

INDICATED BELOW. workspace data 123, 185 of the same workspace element. 

Matter enclosed in heavy brackets [ ] appeared in the Forexample, if theoriginal and the copy of a user workspace 
patent,buthasbeen deleted and isnolongerapartofthe ,„ f'^""'"' have both been modified mdependently smce the 

patent; matter printed in italics indicates additions made ' synchronization, the [contentbased] content-based syn- 

to the patent chronization module 430 determines the appropriate respon- 

' sive action. The content-based synchronization module 430 

ONLY THOSE PARAGRAPHS OF THE request a user to select the preferred one of the modified 

SPECIFICATION AFFECTED BY AMENDMENT versions or may respond based on preset preferences, i.e., by 

ARE PRINTED HEREIN. storing both versions in both stores or by integrating the 

changes into a single preferred version which replaces each 
Column 4, lines 20-38: modified version at both stores. 
An operating system 240 includes a program for control- Column 6, lines 28-41: 
ling processing by the CPU 205, and is typically stored in the piG. 5 is a block diagram illustrating details of the 
data storage device. 230 and loaded into the RAM 235 for ^0 synchronization agent 126, which includes a communica- 
execution. A service engine 245 includes a program for tions module 505 (similar to the communications module 
performing a particular service such as maintaining an 405 described above with reference to FIG. 4) and a general 
e-mail data base, a calendar data base, a bookmarks data synchronization module 510 (similar to the general synchro- 
base or another file data base, and may be also stored in the nization module 425 described above also with reference to 
data storage device 230 and loaded into the RAM 235 for piG. 4). The communications module 505 includes routines 
execution. To perform a service, the service engine 245 for compressing data, and routines for communicating via 
operates on service data 250 (e.g., the e-mail data 165, the (he commimications channel 125 with the base system 190. 
file data 170, the calendar data 175 or the user data 180), The communications module 505 may further include rou- 
which is typically stored in the data storage device [250] tines for establishing a secure communications channel 
25a The service data 250 includes version information 255 through the global firewall [126] 115 and through the 
indicating the date and time of the last modification. The corporate firewall 130. 
service engine 245 operates to update the version informa- Column 6 lines 42-56: 

tion 255 whenever modifications are made. It will be appre- synchronization module 510 includes rou- 

ciated that the portion of memory in the data storage device ^-^^^ comparing the version information 124 with the last 

[250] 230 which contams the service data 250 is referred to synchronization signature 435, and routines for forwarding 

as the service ''store. ^j^^ general synchronization module 425 version informa- 

Column 4, lines 44-59: xiqn 124 determined to be modified. The general synchro- 

An operating system 340 includes a program for control- nization module 510 may [either] maintain its own last 

hngprocessingby the CPU 305, and is typically stored in the synchronization signature 435 copy (not shown), 

data storage device 330 and loaded into the RAM 335 for Alternatively, the request to synchronize from the base 

execution. A desktop service engine 345 (i.e., a particular system 190 may include a copy of the last synchronization 

service engine 245, FIG. 2) includes a service program for signature 435. The general synchronization module 510 

managing user data 180 (i.e., particular service data 250, further includes routines for receiving preferred versions of 
FIG. 2) which includes version information 350 (i.e., par- 45 workspace data 185 workspace elements firoin the general 

ticularversioninformation255, FIG. 2). The desktop service synchronization module 425, and routines for forwarding 

engine 345 may be also stored in the data storage devie 330 preferred versions of workspace data 123 workspace ele- 

and loaded into the RAM 335 for execution. The user data ments to the general synchronization module 425. 

180 may be stored in the data storage 330. As stated above AS A RESULT OF REEXAMINAHON, IT HAS BEEN 
with reference to FIG. 1, the base system [1 90] 190 operates 53 DETERMINED THAT: 

to synchronize the workspace data 185 (which includes user Claim 19 is cancelled. 

data 180) with the workspace data 123. The base system 190 Claims 1-2, 6-8, 10-11 and 21-25 are determined to be 

may be also stored in the data storage device 330 and loaded patentable as amended. 

into the RAM 335 for execution. Claims 3-5, 9, 12-18 and 20, dependent on an amended 
Column 5, lines 35-49: 55 claim, are determined to be patentable. 

The synchronization-start module 420 includes routines ^ ^ computer-based method comprising the steps of: 

for determining when to initiate synchronization of work- (a) establishing a communications channel through a 

space data 123 and workspace data 185. For example, the firewall using an HITP port or an SSL port; 

synchronization-start module 420 may initiate data synchro- (t) generating first examination results from first version 

nization upon user request, at a particular time of day, after 60 information which indicates whether a first workspace 

a predetermined time period passes, after a predetermined element stored at a first store within [a] the firewall has 

number of changes, after a user action such as user log-off been modified; 

or upon like criteria. The synchronization-start module 420 ([b]c) generating second examination results from second 

initiates data synchronization by inslructing the general version information which indicates whether an 

synchronization module 425 to begin execution of its rou- 65 independently-modifiable copy of the first workspace 

tines. It will be appreciated that communications with syn- element has been modified, the copy being stored at a 

chronization agent 126 preferably initiate from within the second store on a smart phone outside the firewall; 
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([cJcQ initialing steps ([a]Z?) and ([b]c) from within the 
firewall through the communications channel when 
predetermined criteria have been satisfied; 

([d]e) generating a preferred version from the first work- 
space element and from the copy based on the first and ^ 
second examination results^ wherein if only one of the 
first workspace element and the copy has been 
modified, then the step of generating includes selecting 
the one as the preferred version; and 

([e]/) storing the preferred version at the first store and at 
the second store. 

2. [The method of claim 1] A computer-based method 
comprising the steps of: 

(a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store outside the firewall; 

(c) initiating steps (a) and (b) from within the firewall 
when predetermined criteria have been satisfied, 25 

(d) generating a preferred version from the first work- 
space element and from the copy based on the first and 
second examination results; and 

(e) storing the preferred version at the first store and at 
the second store; 30 

wherein the second store is on a global server outside the 
firewall and which is protected by a global firewall. 

6. [The method of claim 1 further comprising,] A 
computer-based method comprising the steps of: 

(a) generating first examination results from first version ^5 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 

(b) generating second examination results from second 
version information which indicates whether an ^ 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store outside the firewall; 

(c) initiating steps (a) and {b) from within the firewall 
when predetermined criteria have been satisfied; 

(d) generating a preferred version from tlie first work- 
space element and from the copy based on the first and 
second exatnination results; 

{e) storing the preferred version at the first store and at 

the second store; and 
before generating the first examination results, the step of 

updating the first version information whenever the first 

workspace element is modified. 

7. fThe method of claim 1 further comprising,] A com- 55 
puter based method comprising the steps of: 

{a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 50 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been tnodified, the copy being stored at a 
second store outside the firewall; 65 

(c) initiating steps {a) and (b) from within the firewall 
when predetermined criteria have been satisfied; 
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(d) generating a preferred version from the first work- 
space element and from the copy based on the first and 
second examination results; 

(e) storing the preferred version at the first store and at 
the second store; and 

before generating the second examination results, the step 
of updating the second version information whenever 
the copy is modified. 

8. frhe method of claim 1] A computer-based method 
comprising the steps of: 

(a) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall has been 
modified; 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store outside the firewall; 

(c) initiating steps (a) and (b) from within the firewall 
when predetermined criteria have been satisfied; 

(d) generating a preferred version from the first work- 
space element and from the copy based on the first and 
second examination results; 

(e) storing the preferred version at the first store and at 
the second store; and 

wherein if only one of the first workspace element and the 
copy has been modified, then the step of generating 
includes selecting the one as the preferred version. 

10. A system comprising: 

a communications channel through a firewall comprising 
one of an HTTP port and an SSL port; 

a general synchronization module for operating within [a] 
the first firewall and for examining first version infor- 
mation to determine whether a first workspace element 
at a first store has been modified; 

a synchronization agent for operating outside the first 
firewall and for forwarding to the general synchroni- 
zation module second version information which indi- 
cates whether an independently modifiable copy of the 
first workspace element at a second store on a smart 
phone has been modified; 

a synchronization-start module for operating within the 
first firewall and for initiating the general synchroni- 
zation module and the synchronization agent when 
predetermined criteria have been satisfied; 

means for generating a preferred version from the first 
workspace element and from the copy by comparing 
the first version information and the second version 
information, wherein if only one of the first workspace 
element and the copy has been modified, then tlie means 
for generating selects the one as tfie preferred version; 
and 

means for storing the preferred version at the first store 
and at the second store. 

11. The system of claim 10 further comprising a commu- 
nications module for communicating through the first 
firewall, wherein the first firewall is positioned between a 
trusted netH'ork and the Internet, 

21. A system comprising: 

first means for generating first examination results from 
first version information which indicates whether a first 
workspace element stored at a first store within a 
firewall has been modified; 
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second means for generating second examination results 
from second version information which indicates 
whether an independently-modifiable copy of the first 
workspace element has been modified, the copy being 
stored at a second store on a smart phone outside the 5 
firewall; 

means for updating the first version information whenever 
the first workspace element is modified or updating the 
second version information whenever the copy is modi- 
fied; 

means for initiating the first and second means from 
within the firewall when predetermined criteria have 
been satisfied; 

means for generating a preferred version from the first 
workspace element and from the copy based on the first 
and second examination results; and 

means for storing the preferred version at the first store 
and at the second store. 

22. A computer-readable storage medium storing program 20 
code for causing a compMier-based system to perform the 
steps of: 

(a) generating first examination results firom first version 
information which indicates whether a first workspace 
element stored at a first store within a firewall posi- 25 
tioned between a trusted network and the Internet has 
been modified; 

(b) generating second examination results from second 
version information which indicates whether an 
independently-modifiable copy of the first workspace 
element has been modified, the copy being stored at a 
second store on a smart phone outside the firewall; 

(c) initiating steps (a) and (b) from within the firewall 
through an Internet communications channel when 
predetermined criteria have been satisfied; 

(d) generating a preferred version from the first work- 
space element and from the copy based on the first and 
second examination results, wherein if only one of the 
first workspace element and the copy has been 
modified, then selecting the one as the preferred ver- 
sion; and 

(e) storing the preferred version at the first store and at the 
second store. 

23. A computer-based method comprising the steps of: 45 

(a) establishing a secure communications channel 
through a firewall using an HTTP port or an SSL port; 

(b) generating first examination results from first version 
information which indicates whether a first workspace 
element stored at a first store within [a] the firewall has ^0 
been modified; 

(c) before generating the first examination results, the step 
of updating the first version information whenever the 
first workspace element is modified; 

(lti]d) generating second examination results from second 
version information which indicates whether an 
independently-moditiable copy of Ihe fii^st workspace 
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element has been modified, the copy being stored at a 
second store outside the firewall; 
{[c]e) initiating steps ([a]6) and ([bj^/) from within the 
firewall when predetermined criteria have been satis- 
fied; 

{[dy) determining based on the first and second exami- 
nation results that both the first workspace element and 
the copy have been modified; and 

([ejg) storing both the first workspace element and the 
copy at the first store and at the second siore^ wherein 
the second store comprises a smart phone. 

24. A system comprising: 

first means for generating first examination results from 
first version information which indicates whether a first 
workspace element stored at a first store within a 
firew^l has been modified; 

second means for generating second examination results 
from second version information which indicates 
whether an independently-modifiable copy of the flrst 
workspace element has been modified, the copy being 
stored at a second store outside the firewall; 

means for updating the first version information whenever 
the first workspace element is modified or updating the 
second version information whenever the copy is modi- 
fied; 

means for initiating the first and second means from 
within the firewall when predetermined criteria have 
been satisfied; 

means for determining based on the first and second 
examination results that both the first workspace ele- 
ment and the copy have been modified; and 

means for storing both the first [file] workspace element 
and the copy at the first store and at the second store, 
wherein the second store comprises a smart phone. 

25. A system comprising: 

. a global server for operating outside a firewall and includ- 
ing memory for storing first workspace data and cor- 
responding first version information; and 

a synchronization agent for managing the first workspace 
data and the corresponding first version information 
and for communicating with remote clients; [and] 

means for updating the first version information whenever 
the first workspace element is modified; 

a remote client for operating within the firewall and 
including memory for storing second workspace data 
and corresponding second version information; 

means for cooperating with the synchronization agent to 
synchronize the first workspace data with the second 
workspace data by examining the first version infor- 
mation and the second version information; and 

a synchronization-start module for initiating workspace 
data synchronization between the global server and the 
remote chent. 



